18b19271f209c75ea66319d2c7d8141f5585fca80fc797a548b5ec520d84d8cb

Sharing

Copy URL Twitter E-mail

General

Target

18b19271f209c75ea66319d2c7d8141f5585fca80fc797a548b5ec520d84d8cb
Size

119KB
MD5

1b89d1b7edb7dada1b8e47ea8e61b1a0
SHA1

2d8dbd396f58e32089a58635873dd417f3073742
SHA256

18b19271f209c75ea66319d2c7d8141f5585fca80fc797a548b5ec520d84d8cb
SHA512

2141126f7368d847c841d4f1a4aa486a604e21189bb227bf9a4a0766ac8cfc9750f81b7c690fdd1b8fef358422c5aab7fe7e0dd508df5d08d3dc28bf46525312
SSDEEP

3072:Y/BUA5yLwahadKlztmyHwqOq6VqVMe7ws/Y:SUAIwahiC4yHwJqlb5Y

Score

N/A

Malware Config

Signatures

Files

18b19271f209c75ea66319d2c7d8141f5585fca80fc797a548b5ec520d84d8cb
.exe windows x86

52b5c47fdad7c18d560cb62270be5346

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
GlobalAlloc
GlobalFree
CreateThread
TerminateThread
WaitForSingleObject
Sleep
LoadResource
SizeofResource
CloseHandle
FindResourceA
GetTempPathA
WriteFile
CreateFileA
GetLastError
lstrlenA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
GetShortPathNameA
GetCurrentProcess
GetCurrentThread
SetThreadPriority
ResumeThread
lstrcpyA
lstrcatA
CreateProcessA
GetEnvironmentVariableA
SetPriorityClass
FreeLibrary
GetProcAddress
LoadLibraryA
ReleaseMutex
WinExec
OpenMutexA
SetFileAttributesA
ExitProcess
CreateMutexA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
SetStdHandle
LCMapStringW
LCMapStringA
SetFilePointer
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
LocalAlloc
InterlockedExchange
RaiseException
GetTickCount
ExitThread
TerminateProcess
DeviceIoControl
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree

shell32

ShellExecuteA

ws2_32

setsockopt
WSAStartup
socket
htons
WSAIoctl
send
select
recv
closesocket
__WSAFDIsSet
connect
gethostbyname
inet_addr
sendto
WSASocketA
htonl

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52b5c47fdad7c18d560cb62270be5346

Headers

File Characteristics

Imports

kernel32

shell32

ws2_32

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 14KB - Virtual size: 19KB

.data1 Size: 1024B - Virtual size: 824B

.rsrc Size: 49KB - Virtual size: 49KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 14KB - Virtual size: 19KB

.data1
Size: 1024B - Virtual size: 824B

.rsrc
Size: 49KB - Virtual size: 49KB